Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier: p6Ygt2xeU4TBA6+Js0QQ+54gzcSG6ws+xAmcoytPitY=
Subject key identifier: 8E:30:3B:B4:03:3A:BC:24:07:BC:6E:11:B8:90:DE:B2:D1:8C:C9:22
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial: 019CAC4689841D6B23769E42CA4374E3E7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number: 15E8
Signing time: Mon 02 Mar 2026 02:00:29 +0000
Manifest this update: Mon 02 Mar 2026 02:00:29 +0000
Manifest next update: Tue 03 Mar 2026 02:00:29 +0000
Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: UoJHGo/4i/jFt4Rpu9NiDw/19pTlY57wvdoKEwa5h4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:89:84:1d:6b:23:76:9e:42:ca:43:74:e3:e7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Validity
Not Before: Mar 2 02:00:29 2026 GMT
Not After : Mar 3 02:00:29 2026 GMT
Subject: CN=8e303bb4033abc2407bc6e11b890deb2d18cc922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:e9:23:62:5e:10:cc:45:35:71:5a:4f:b6:
d4:27:54:49:80:69:e5:41:49:fc:a0:64:a3:5c:32:
1e:67:fd:3d:9f:96:cc:0f:a2:94:f7:18:f5:71:53:
98:67:a9:ec:c5:92:38:eb:db:66:cf:6c:62:66:8c:
ae:1c:f0:8d:9a:f9:a4:d0:c2:47:f4:d3:d4:5a:6e:
bf:27:bd:04:12:d2:01:e0:88:bf:90:b4:a5:cf:5b:
16:9b:ae:f9:d9:55:4b:4d:b3:f4:27:08:99:6e:28:
11:19:48:3d:e6:09:d7:08:1b:72:13:d8:7c:28:19:
3e:5f:e8:e3:ba:25:4c:a8:3e:bd:d3:46:2d:57:5c:
fb:94:d9:e5:40:ee:96:0d:3d:c9:e8:51:f7:22:0e:
14:8b:52:7f:b3:7c:d1:0a:09:d8:8a:ae:37:29:cc:
db:5a:77:77:e4:5a:b7:89:db:20:1f:13:64:5a:f1:
24:c5:9c:91:b2:d0:ab:f6:48:25:21:96:74:da:1f:
38:69:ed:d2:6e:ea:c2:50:43:ad:65:6d:f2:56:36:
2d:29:61:50:da:44:dc:d5:f4:f1:7f:01:90:ba:b8:
d8:7a:2b:d2:13:0e:a7:79:10:bc:1e:9d:07:f8:e3:
e1:24:58:ed:0c:c7:5d:0e:0c:3c:4b:b5:99:9c:a4:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:30:3B:B4:03:3A:BC:24:07:BC:6E:11:B8:90:DE:B2:D1:8C:C9:22
X509v3 Authority Key Identifier:
keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b7:49:4f:84:eb:5c:00:6c:fc:7b:9c:0e:9a:89:a4:23:7f:
9f:9c:c9:b6:d1:6a:f8:b6:61:6d:a1:ab:1a:9f:23:c5:06:9a:
b7:f9:46:f9:41:d2:ec:35:7c:ac:f4:39:c0:84:4e:a5:ce:fc:
ed:d7:f0:60:fc:4c:e6:7c:e0:fb:8c:e1:55:58:7a:9f:44:fd:
58:74:ce:8a:19:83:9b:3c:fe:fd:54:0e:84:5f:f3:e8:9d:87:
dd:10:9e:24:b7:4d:aa:93:79:58:da:11:e9:3e:ca:e2:0c:80:
78:c5:dd:ce:0a:f6:be:c2:a1:70:1a:d3:c0:c1:6e:64:00:ec:
6d:f5:d9:20:70:ee:ec:47:7a:a9:c2:24:5f:16:1b:76:57:ce:
3f:d3:05:04:39:f5:34:66:31:6b:99:e5:d8:c8:6a:16:64:29:
e1:3a:42:86:71:62:0e:2c:a7:0b:ec:63:16:a8:8d:cc:b2:20:
b3:7d:fb:08:52:44:5c:4d:a7:74:cc:4b:1c:9e:93:14:95:2b:
18:86:2c:27:4f:cf:5b:37:d0:8c:17:a8:d6:54:a4:68:2c:b4:
53:6c:d6:9e:5a:db:4f:68:7d:31:73:97:24:09:fa:0c:88:73:
e5:f9:ee:52:84:6f:ca:77:01:a9:74:99:12:42:bd:27:3e:57:
88:65:6a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:23 2026 by rpki-client